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Abstract of JP 2000253066 (A) 
PROBLEM TO BE SOLVED: To allow a security 
manager to concentrate on design of a proper 
security policy without caring about complicated 
firewall rules, sequence of the rules, and other 
subordinate configuration problems. SOLUTION: A 
firewall manager uses a model definition language 
(MDL) 210 and a related parser 220 to generate an 
entity relation model 300. A model compiler 240 
interprets the entity relation model 300 into a proper 
firewall configuration file 250. The entity relation 
model 300 provides a framework expressing both a 
security policy independent of the firewall and the 
network topology. The security policy is expressed 
from the standpoint of a 'role'. The role is used to 
define a function of a networic through the service is 
sent/ received and assigned to various hosts or a 
host group in the network. 
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